Tag: 2025-11-21

4 Attack Reports | 163 Vulnerabilities

Attack reports

Analysis of APT-C-26 (Lazarus) Group's Attack Campaign Using Remote IT Disguise to Deploy Monitoring Software

The report details an attack campaign by APT-C-26 (Lazarus), a highly active APT group targeting various industries globally. The group deployed a customized monitoring program with remote desktop control capabilities, likely used by remote IT personnel infiltrating target companies. The malware co…
apt
north korea
persistence
screen capture
remote desktop
2025-11-21
systemuiext.dll
winupdateservice.exe
remote it
monitorinstaller_update1.exe
monitoring software
Published: November 21, 2025
Downloadable IOCs: 0

New Tools and Techniques of ToddyCat APT

The ToddyCat APT group has evolved its methods to gain covert access to corporate email. The report details their use of PowerShell-based TomBerBil for extracting browser data, TCSectorCopy for copying Outlook OST files, and attempts to steal OAuth tokens from Microsoft 365 processes. These tools a…
apt
tomberbil
powershell
data theft
browser
oauth
outlook
2025-11-21
email
xstreader
tcsectorcopy
sharptokenfinder
Published: November 21, 2025
Downloadable IOCs: 0

Reoccurring Use of Highly Suspicious PDF Editors to Infiltrate Environments

Since November 19, 2025, a surge in alerts involving a file named 'ConvertMate' has been observed. Despite its initial harmless appearance, deeper analysis reveals highly suspicious behavior. The file, downloaded from specific domains, initiates external connections, performs host queries, and crea…
scheduled tasks
pdf converter
2025-11-21
malicious vector
suspicious behavior
convertmate
amaryllis signal ltd
pdfeditor
Published: November 21, 2025
Downloadable IOCs: 0

It's not personal, it's just business

Advances in agentic AI are transforming the cyber crime landscape, allowing AI agents to autonomously execute routine activities through APIs. This technology brings efficiencies to both legitimate and criminal economies, potentially lowering barriers to entry for less skilled actors. The discovery…
cybersecurity
threat landscape
2025-11-21
force enabler
cyber crime
honeypot systems
defensive strategies
ai-orchestrated campaign
agentic ai
Published: November 21, 2025
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-41115

10.0
    Grafana
  • Grafana
Published: November 21, 2025

CVE-2025-65108

10.0
    Md-To-Pdf
  • Md-To-Pdf
Published: November 21, 2025

CVE-2025-11456

9.8
    Elex
  • Wordpress Helpdesk And Customer Ticketing System
Published: November 21, 2025

CVE-2025-11127

9.8
    Mstoreapp
  • Mstoreapp Mobile App
  • Mstoreapp Mobile Multivendor
Published: November 21, 2025

CVE-2025-64310

9.3
    Epson
  • Webconfig
  • Web Control
Published: November 21, 2025

CVE-2025-64767

9.1
    Hpke-Js
  • Hpke-Js
Published: November 21, 2025

CVE-2025-62164

8.8
    Vllm
  • Vllm
Published: November 21, 2025

CVE-2025-11985

8.8
    Realty Portal
  • Realty Portal
Published: November 21, 2025

CVE-2025-12138

8.8
    Wordpress
  • Url Image Importer
Published: November 21, 2025

CVE-2025-13156

8.8
    Vitepos
  • Point Of Sale
Published: November 21, 2025

CVE-2025-11087

8.8
    Wordpress
  • Plugin
Published: November 21, 2025

CVE-2025-64755

8.7
    Claude Code
  • Claude Code
Published: November 21, 2025

CVE-2025-65102

8.7
    Pjsip
  • Pjsip
Published: November 21, 2025

CVE-2025-65947

8.7
    Thread-Amount
  • Thread-Amount
Published: November 21, 2025

CVE-2025-65109

8.5
    Minder
  • Minder Helm
  • Minder Go
Published: November 21, 2025

CVE-2025-64695

8.4
    Logstare
  • Logstare Collector
Published: November 21, 2025

CVE-2025-62372

8.3
    Vllm
  • Vllm
Published: November 21, 2025

CVE-2025-65106

8.3
    Langchain
  • Langchain
Published: November 21, 2025

CVE-2025-13322

8.1
    Wordpress
  • Wp Audio Gallery
Published: November 21, 2025

CVE-2025-65946

8.1
    Roo
  • Roo Code
Published: November 21, 2025

CVE-2025-64762

8.0
    Authkit
  • Authkit-Nextjs
Published: November 21, 2025

CVE-2025-13499

7.8
    Wireshark
  • Wireshark
Published: November 21, 2025

CVE-2025-13470

7.7
    Rnp
  • Rnp
Published: November 21, 2025

CVE-2025-30201

7.7
    Wazuh
  • Wazuh Agent
Published: November 21, 2025

CVE-2025-13138

7.5
    Wordpress
  • Wp Directory Kit
Published: November 21, 2025

CVE-2025-13357

7.4
    Hashicorp
  • Vault Terraform Provider
Published: November 21, 2025

CVE-2025-13132

7.4
    *
  • *
Published: November 21, 2025

CVE-2025-12135

7.2
    Wordpress
  • Wpbookit
Published: November 21, 2025

CVE-2025-12160

7.2
    Wordpress
  • Simple User Registration
Published: November 21, 2025

CVE-2025-66055

7.2
    Icegram
  • Email Subscribers
Published: November 21, 2025

CVE-2025-12973

7.2
    Wordpress
  • S2b Ai Assistant Chatbot Chatgpt Openai Content Image Generator
Published: November 21, 2025

CVE-2025-62626

7.2
    Amd
  • Cpu
Published: November 21, 2025

CVE-2025-13159

7.1
    Wordpress
  • Flo Forms
Published: November 21, 2025

CVE-2025-13485

6.9
    Itsourcecode
  • Online File Management System
Published: November 21, 2025

CVE-2025-62687

6.9
    Logstare
  • Collector
Published: November 21, 2025

CVE-2025-64299

6.9
    Logstare
  • Logstare Collector
Published: November 21, 2025

CVE-2025-65092

6.9
    Espressif
  • Iot Development Framework
Published: November 21, 2025

CVE-2025-58097

6.8
    Logstare
  • Collector
Published: November 21, 2025

CVE-2025-13524

6.8
    Aws
  • Wicker
Published: November 21, 2025

CVE-2025-62426

6.5
    Vllm
  • Vllm
Published: November 21, 2025

CVE-2025-10938

6.5
    Wordpress
  • Uipress
Published: November 21, 2025

CVE-2025-66053

6.5
    Kriesi
  • Enfold
Published: November 21, 2025

CVE-2025-66073

6.5
    Cozmoslabs
  • Wp Webhooks
Published: November 21, 2025

CVE-2025-66090

6.5
    Sonalsinha21
  • Skt Skill Bar
Published: November 21, 2025

CVE-2025-66091

6.5
    Stylish-Cost-Calculator
  • Stylish Cost Calculator
Published: November 21, 2025

CVE-2025-66098

6.5
    Camille V
  • Travelers Map
Published: November 21, 2025

CVE-2025-65107

6.5
    Langfuse
  • Langfuse
Published: November 21, 2025

CVE-2025-11003

6.4
    Wordpress
  • Uipress Lite
Published: November 21, 2025

CVE-2025-11763

6.4
    Wordpress
  • Display Pages Shortcode
Published: November 21, 2025

CVE-2025-11764

6.4
    Wordpress
  • Shortcodes Bootstrap Plugin
Published: November 21, 2025

CVE-2025-11765

6.4
    Wordpress
  • Stock Tools
Published: November 21, 2025

CVE-2025-11767

6.4
    Wordpress
  • Tips Shortcode Plugin
Published: November 21, 2025

CVE-2025-11768

6.4
    Wordpress
  • Plugin
Published: November 21, 2025

CVE-2025-11770

6.4
    Brighttalk
  • Brighttalk Shortcode
Published: November 21, 2025

CVE-2025-11799

6.4
    Wordpress
  • Affiliate Ai Lite
Published: November 21, 2025

CVE-2025-11800

6.4
    Surbma
  • Minicrm Shortcode
Published: November 21, 2025

CVE-2025-11801

6.4
    Wordpress
  • Plugin
Published: November 21, 2025

CVE-2025-11802

6.4
    Bulma
  • Bulma Shortcodes
Published: November 21, 2025

CVE-2025-12660

6.4
    Wordpress
  • Padlet Shortcode
Published: November 21, 2025

CVE-2025-12661

6.4
    Wordpress
  • Pollcaster Shortcode Plugin
Published: November 21, 2025

CVE-2025-13135

6.4
    Hotelrunner
  • Booking Widget
Published: November 21, 2025

CVE-2025-11803

6.4
    Wordpress
  • Wpsite Shortcode
Published: November 21, 2025

CVE-2025-11808

6.4
    Wordpress
  • Plugin Google Street View
Published: November 21, 2025

CVE-2025-11826

6.4
    Wordpress
  • Plugin
Published: November 21, 2025

CVE-2025-13141

6.4
    Wordpress
  • Ht Mega Absolute Addons For Elementor
Published: November 21, 2025

CVE-2025-12964

6.4
    Wordpress
  • Magical Products Display
Published: November 21, 2025

CVE-2025-12935

6.4
    Wordpress
  • Fluentcrm
Published: November 21, 2025

CVE-2025-66057

6.3
    Boldthemes
  • Bold Page Builder
Published: November 21, 2025

CVE-2025-36149

6.3
    Ibm
  • Concert Software
Published: November 21, 2025

CVE-2025-11935

6.3
    Wolfssl
  • Wolfssl
Published: November 21, 2025

CVE-2025-11936

6.3
    Wolfssl
  • Wolfssl
Published: November 21, 2025

CVE-2025-11885

6.1
    Echbay
  • Admin Security Plugin
Published: November 21, 2025

CVE-2025-12746

6.1
    Tainacan
  • Tainacan
Published: November 21, 2025

CVE-2025-13134

6.1
    Authorsure
  • Authorsure
Published: November 21, 2025

CVE-2025-66066

6.1
    Envothemes
  • Envo Extra
Published: November 21, 2025

CVE-2025-64751

5.8
    Openfga
  • Openfga
Published: November 21, 2025

CVE-2025-48502

5.5
    Amd
  • Uprof
Published: November 21, 2025

CVE-2025-62608

5.5
    Apple
  • Mlx
Published: November 21, 2025

CVE-2025-62609

5.5
    Apple
  • Mlx
Published: November 21, 2025

CVE-2025-12881

5.4
    Woocommerce
  • Return Refund And Exchange For Woocommerce
Published: November 21, 2025

CVE-2025-66063

5.4
    Jgwhite33
  • Wp Google Review Slider
Published: November 21, 2025

CVE-2025-66067

5.4
    Funnelkit
  • Funnel Builder
Published: November 21, 2025

CVE-2025-66081

5.4
    Jeff Starr
  • Head Meta Data
Published: November 21, 2025

CVE-2025-11368

5.3
    Wordpress
  • Learnpress
Published: November 21, 2025

CVE-2025-62189

5.3
    Logstare
  • Collector
Published: November 21, 2025

CVE-2025-11771

5.3
    Tokenico
  • Tokenico Plugin
Published: November 21, 2025

CVE-2025-12170

5.3
    Wordpress
  • Checkbox Plugin
Published: November 21, 2025

CVE-2025-12894

5.3
    Wordpress
  • Import Wp
Published: November 21, 2025

CVE-2025-12039

5.3
    Woocommerce
  • Bigbuy Dropshipping Connector
Published: November 21, 2025

CVE-2025-10054

5.3
    Elex
  • Wordpress Helpdesk And Customer Ticketing System
Published: November 21, 2025

CVE-2025-66059

5.3
    Craig Hewitt
  • Seriously Simple Podcasting
Published: November 21, 2025

CVE-2025-66060

5.3
    Craig Hewitt
  • Seriously Simple Podcasting
Published: November 21, 2025

CVE-2025-66064

5.3
    Rafflepress
  • Giveaways And Contests
Published: November 21, 2025

CVE-2025-66065

5.3
    Jegstudio
  • Gutenverse
Published: November 21, 2025

CVE-2025-66086

5.3
    Cozy Vision
  • Sms Alert Order Notifications
Published: November 21, 2025

CVE-2025-66087

5.3
    Propertyhive
  • Propertyhive
Published: November 21, 2025

CVE-2025-66099

5.3
    Themeatelier
  • Chat Help
Published: November 21, 2025

CVE-2025-12747

5.3
    Tainacan
  • Tainacan
Published: November 21, 2025

CVE-2025-64483

5.3
    Wazuh
  • Wazuh
Published: November 21, 2025

CVE-2025-29934

5.3
    Amd
  • Amd Cpu
Published: November 21, 2025

CVE-2025-0504

5.3
    Synopsys
  • Black Duck Sca
Published: November 21, 2025

CVE-2025-64169

5.1
    Wazuh
  • Wazuh
Published: November 21, 2025

CVE-2025-9825

5.0
    Gitlab
  • Gitlab
Published: November 21, 2025

CVE-2025-11973

4.9
    Wordpress
  • Jianshu
Published: November 21, 2025

CVE-2025-12750

4.9
    Groundhogg
  • Groundhogg
Published: November 21, 2025

CVE-2025-61949

4.8
    Logstare
  • Collector
Published: November 21, 2025

CVE-2025-12066

4.4
    Wordpress
  • Wp Delete Post Copies
Published: November 21, 2025

CVE-2025-12022

4.3
    Wordpress
  • Elex Helpdesk And Customer Ticketing System
Published: November 21, 2025

CVE-2025-12023

4.3
    Elex
  • Elex Wordpress Helpdesk And Customer Ticketing System
Published: November 21, 2025

CVE-2025-12085

4.3
    Elex
  • Wordpress Helpdesk And Customer Ticketing System
Published: November 21, 2025

CVE-2025-12169

4.3
    Wordpress
  • Helpdesk Customer Ticketing System
Published: November 21, 2025

CVE-2025-11773

4.3
    Tokenico
  • Tokenico
Published: November 21, 2025

CVE-2025-11815

4.3
    Wordpress
  • Uipress Lite
Published: November 21, 2025

CVE-2025-12086

4.3
    Woocommerce
  • Return Refund And Exchange
Published: November 21, 2025

CVE-2025-13142

4.3
    Wordpress
  • Custom Post Type
Published: November 21, 2025

CVE-2025-13149

4.3
    Publishpress
  • Future
Published: November 21, 2025

CVE-2025-10039

4.3
    Wordpress
  • Elex Wordpress Helpdesk And Customer Ticketing System
Published: November 21, 2025

CVE-2025-66056

4.3
    Uncanny Owl
  • Uncanny Automator
Published: November 21, 2025

CVE-2025-66061

4.3
    Craig Hewitt
  • Seriously Simple Podcasting
Published: November 21, 2025

CVE-2025-66069

4.3
    Themeisle
  • Woocommerce-Product-Addon
Published: November 21, 2025

CVE-2025-66071

4.3
    Tychesoftwares
  • Custom Order Numbers For Woocommerce
Published: November 21, 2025

CVE-2025-66072

4.3
    Stiofan
  • Userswp
Published: November 21, 2025

CVE-2025-66077

4.3
    Wpwax
  • Legal Pages
Published: November 21, 2025

CVE-2025-66079

4.3
    Jegstudio
  • Gutenverse Form
Published: November 21, 2025

CVE-2025-66082

4.3
    Magepeopleteam
  • Wp Evently
Published: November 21, 2025

CVE-2025-66083

4.3
    Magepeopleteam
  • Wp Evently
Published: November 21, 2025

CVE-2025-66084

4.3
    Shahjahan Jewel
  • Fluentcommunity
Published: November 21, 2025

CVE-2025-66085

4.3
    Tychesoftwares
  • Arconix Shortcodes
Published: November 21, 2025

CVE-2025-66089

4.3
    Webtoffee
  • Product Feed For Woocommerce
Published: November 21, 2025

CVE-2025-66097

4.3
    Igor Jerosimic
  • I-Order-Terms
Published: November 21, 2025

CVE-2025-66101

4.3
    Sabuj Kundu
  • Cbx Bookmark And Favorite
Published: November 21, 2025

CVE-2025-66112

4.3
    Webyes
  • Accessibility Toolkit
Published: November 21, 2025

CVE-2025-13432

4.3
    Hashicorp
  • Terraform Enterprise
Published: November 21, 2025

CVE-2025-66075

4.2
    Wp Cookie Notice
  • Wp Cookie Notice
Published: November 21, 2025

CVE-2025-66062

3.7
    Frank Goossens
  • Wp Youtube Lyte
Published: November 21, 2025

CVE-2025-65111

2.9
    Spicedb
  • Spicedb
Published: November 21, 2025

CVE-2025-11932

2.3
    Wolfssl
  • Wolfssl
Published: November 21, 2025

CVE-2025-11933

2.3
    Wolfssl
  • Wolfssl
Published: November 21, 2025

CVE-2025-11931

2.1
    Wolfssl
  • Wolfssl
Published: November 21, 2025

CVE-2025-11934

2.1
    Wolfssl
  • Wolfssl
Published: November 21, 2025

CVE-2025-54866

1.8
    Wazuh
  • Wazuh Agent
Published: November 21, 2025

CVE-2025-12888

1.0
    Wolfssl
  • X25519
    Esp
Published: November 21, 2025

CVE-2025-40209

None
    Linux
  • Linux Kernel
Published: November 21, 2025

CVE-2025-40210

None
    Linux
  • Linux Kernel
Published: November 21, 2025

CVE-2025-40211

None
    Linux
  • Linux Kernel
Published: November 21, 2025

CVE-2025-66092

None
    Bqworks
  • Accordion Slider
Published: November 21, 2025

CVE-2025-66093

None
    Hupe13
  • Extensions For Leaflet Map
Published: November 21, 2025

CVE-2025-66095

None
    Iqonic Design
  • Kivicare
Published: November 21, 2025

CVE-2025-66096

None
    Tableberg
  • Table Block
Published: November 21, 2025

CVE-2025-66106

None
    *
  • Featured-Post-Creative
Published: November 21, 2025

CVE-2025-66107

None
    Scott Paterson
  • Subscriptions Memberships For Paypal
Published: November 21, 2025

CVE-2025-66108

None
    Tnc
  • Tnc Toolbox
Published: November 21, 2025

CVE-2025-66109

None
    Octolize
  • Cart Weight For Woocommerce
Published: November 21, 2025

CVE-2025-66110

None
    Bplugins
  • Tiktok Feed
Published: November 21, 2025

CVE-2025-66111

None
    Nelio Software
  • Nelio Popups
Published: November 21, 2025

CVE-2025-66113

None
    Themeatelier
  • Better Chat Support For Messenger
Published: November 21, 2025

CVE-2025-66114

None
    Funda
  • Show Variations As Single Products Woocommerce
Published: November 21, 2025

CVE-2025-66115

None
    Matrixaddons
  • Easy Invoice
Published: November 21, 2025

CVE-2025-31216

None
    Apple
  • Ipad Os
  • Ios
Published: November 21, 2025

CVE-2025-31248

None
    Apple
  • Macos Ventura
  • Macos Sequoia
  • Macos Sonoma
Published: November 21, 2025

CVE-2025-31266

None
    Apple
  • Safari
  • Macos Sequoia
Published: November 21, 2025

CVE-2025-43374

None
    Apple
  • Ipados
  • Ios
  • Visionos
  • Macos Sonoma
  • Macos Ventura
  • Macos Sequoia
  • Watchos
Published: November 21, 2025

CVE-2025-12678

None
    Gitlab
  • Gitlab
Published: November 21, 2025
Click here to see more Vulnerabilities